Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d7NtVLMHXzwIrXvh7lUmFr4VhsM.roa
File:                     d7NtVLMHXzwIrXvh7lUmFr4VhsM.roa (raw, json)
Hash identifier:          x6VOTezG4Q4NTyJZQIazOXpIh0upm3ndmbdJn0R30+4=
Subject key identifier:   77:B3:6D:54:B3:07:5F:3C:08:AD:7B:E1:EE:55:26:16:BE:15:86:C3
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0116E3
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d7NtVLMHXzwIrXvh7lUmFr4VhsM.roa
Signing time:             Wed 26 Jan 2022 18:39:25 +0000
ROA not before:           Wed 26 Jan 2022 18:39:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        193.38.178.0/24 maxlen: 24
                          193.38.179.0/24 maxlen: 24
                          193.38.180.0/24 maxlen: 24
                          193.38.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71395 (0x116e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jan 26 18:39:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77b36d54b3075f3c08ad7be1ee552616be1586c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:04:3d:62:37:aa:14:87:36:e3:b6:d4:ba:
                    40:eb:7f:88:1e:91:f6:7d:a4:61:bc:29:a4:05:16:
                    d9:38:2f:22:70:e1:b0:a7:a7:b7:ae:a5:91:12:d9:
                    b9:2b:14:0c:5c:a0:ff:3c:53:26:a3:fc:1e:10:60:
                    fa:ab:2b:27:1a:4e:8e:22:68:e9:fb:41:15:7d:db:
                    6e:71:b0:81:38:96:4a:09:f3:09:ea:e6:3f:a5:71:
                    25:ba:98:a4:c5:0d:a0:94:2b:f1:56:60:b9:94:59:
                    7e:eb:ce:e8:5d:8b:eb:21:c3:46:fe:63:40:c5:d5:
                    17:8e:5e:76:17:74:e6:2a:59:c3:18:5d:69:ee:aa:
                    b4:a4:f2:53:84:c9:fe:99:a4:65:50:08:0f:62:30:
                    ff:cb:e6:e6:44:b1:18:f1:d5:b4:9b:14:09:c5:48:
                    fa:f5:c1:d8:87:ba:d4:44:8e:f6:9e:13:ab:70:5e:
                    69:b1:8b:9b:dc:4d:26:b2:7c:d4:6f:57:a8:d9:38:
                    a6:ca:1a:42:ae:bb:ca:04:17:ca:9a:45:5d:78:2a:
                    8a:68:ec:99:79:42:6e:35:b0:72:e7:06:85:92:58:
                    82:bc:d0:d5:93:7f:e0:09:a5:a0:b7:73:1c:24:ab:
                    6b:b3:06:a2:bb:56:ee:19:1d:88:ea:a5:d4:46:6b:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:6D:54:B3:07:5F:3C:08:AD:7B:E1:EE:55:26:16:BE:15:86:C3
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/d7NtVLMHXzwIrXvh7lUmFr4VhsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.178.0-193.38.181.255

    Signature Algorithm: sha256WithRSAEncryption
         92:9e:79:e3:88:12:2f:bd:b1:9f:ef:9d:92:db:70:95:d6:bb:
         a9:47:43:5f:e3:fd:82:8b:83:02:ff:98:78:56:f0:0f:42:ed:
         2c:fb:f1:0a:e2:91:2a:37:05:2b:48:cf:28:98:3b:de:12:3d:
         ea:77:da:df:cb:d7:c2:73:40:0f:7b:0e:d6:ce:0a:7c:51:50:
         1a:3b:5b:63:84:9a:a9:8c:d9:07:93:24:38:3e:af:3d:f9:eb:
         68:82:69:04:4e:c0:67:77:f4:6f:8e:51:33:04:85:91:04:3a:
         78:45:8f:3b:43:64:b8:a2:49:a9:16:2d:65:67:ff:eb:57:d8:
         02:76:86:49:a0:dd:2b:48:42:70:a0:9e:93:05:65:e4:03:9c:
         53:6b:52:07:b7:f5:bf:11:8b:89:c7:c7:8e:3f:fd:94:dc:58:
         e9:4e:e6:20:57:85:6d:a9:f7:b9:3b:19:b2:11:33:3a:6b:ef:
         28:a9:f6:c2:bd:e5:b8:75:ba:f3:fe:78:85:a2:27:81:c8:a5:
         53:33:60:c2:44:23:b3:df:e3:c9:fd:36:61:0e:ba:a6:9f:7d:
         ae:2a:12:22:96:e2:bb:f7:0a:9e:8f:14:9f:91:25:98:8a:1e:
         29:6a:f3:e4:94:d4:fa:a3:d6:92:0a:1d:58:0f:73:f9:b9:60:
         46:e0:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:13 2023 by rpki-client on console-fra.rpki-client.org